Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
File: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json)
Hash identifier: POjeCAnKwuTAQFnVG2CRnhM0P0pXHBFYL66RzSv2idU=
Subject key identifier: D2:21:3E:D1:35:09:AF:F6:85:E0:A8:36:2D:45:10:8A:D2:AC:5D:15
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial: 01A1A601CB1536C5A92AEA60F043C62D4EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
Manifest number: 1ADA
Signing time: Wed 04 Nov 2026 10:01:37 +0000
Manifest this update: Wed 04 Nov 2026 10:01:37 +0000
Manifest next update: Thu 05 Nov 2026 10:01:37 +0000
Files and hashes: 1: sbqC7N_wUa4q8tipBdZquspEtdM.roa (hash: GWrWJHWfHuRJqdNaMh/zaxrPpWqKcwHZQDPdO0Af6TM=)
2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: hpwVuApxTTp1zhbkrfQnA6VJcbFnGqXX/xUzE5nUSMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:01:cb:15:36:c5:a9:2a:ea:60:f0:43:c6:2d:4e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Validity
Not Before: Nov 4 10:01:37 2026 GMT
Not After : Nov 5 10:01:37 2026 GMT
Subject: CN=d2213ed13509aff685e0a8362d45108ad2ac5d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:d6:ec:15:a3:b8:7f:17:b4:1e:99:11:06:
19:70:74:07:ef:a8:65:ce:2c:18:91:1c:8c:c7:91:
8b:d9:c9:a1:36:3b:90:81:8b:d2:77:c7:4a:df:6b:
ed:96:aa:29:e5:b7:34:eb:c1:b9:1e:8b:33:68:de:
3f:7a:17:4a:44:aa:10:bf:ee:cd:c0:31:58:af:c7:
70:ee:76:9e:f8:0c:98:b2:97:b4:6e:27:76:03:da:
4d:05:4c:87:da:e3:71:b1:21:af:02:ec:63:7a:68:
eb:08:af:ec:cc:77:f3:75:31:cc:af:12:15:ad:81:
d5:a3:1c:1a:ca:27:77:88:e8:0e:39:cf:76:f6:68:
f4:6f:1c:80:c8:50:05:49:ff:d0:f1:49:ca:41:39:
75:13:a5:3d:d6:89:d4:46:9a:50:73:bb:65:39:85:
d3:eb:86:68:7e:04:e4:8b:c4:c2:3d:b2:eb:a2:7c:
e6:f5:0b:7d:60:b7:bf:ac:52:45:2b:61:eb:d7:8d:
c2:b1:8b:28:41:84:ff:fa:0d:1c:d5:86:48:a9:26:
83:85:69:e8:8c:73:2a:af:94:b8:8d:8d:ec:62:c0:
e9:6b:66:ff:0a:a1:a3:5c:79:67:fc:58:69:84:df:
ca:be:0c:f8:8b:2b:03:65:b4:69:8a:16:f9:37:47:
d6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:21:3E:D1:35:09:AF:F6:85:E0:A8:36:2D:45:10:8A:D2:AC:5D:15
X509v3 Authority Key Identifier:
keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fe:3b:f7:55:c8:ce:a2:2d:8d:1e:57:23:c4:e6:f3:98:03:
22:be:cd:d9:3c:98:55:e3:8c:a9:f4:fc:89:e9:6f:5f:39:f9:
a8:43:d3:cb:3b:a1:a3:fc:1d:70:40:f9:18:62:82:16:cf:bb:
fd:4b:43:e2:b4:e0:57:9a:b0:f4:21:30:60:22:7e:8c:da:95:
a6:61:72:ac:67:9c:30:47:ca:4e:4e:02:48:69:9f:05:eb:82:
74:bd:e2:e6:4a:de:b2:8d:d9:70:07:a4:e5:4b:40:1b:02:6a:
ab:14:9e:f8:dd:96:e7:8a:e7:2a:1d:76:b0:fc:9d:5a:4a:f2:
51:49:f6:a0:95:f8:d3:b6:d1:2b:37:6f:f8:bb:ff:83:94:3a:
0e:4c:b1:aa:ac:b2:b9:d0:5c:7f:d5:39:68:f5:44:9a:f6:a4:
30:4d:94:7c:5c:e8:2f:d1:7b:8e:a4:5c:9d:45:c5:24:d0:c2:
e8:a4:f4:bb:ce:e9:ea:ba:ad:23:40:58:b3:77:e4:0d:9c:50:
78:d0:34:a8:5b:fe:19:36:5f:84:45:95:37:3f:7e:8e:75:f6:
7e:be:c2:dc:c1:f9:7a:34:08:d8:6f:e4:7a:fd:f6:a0:c8:d4:
18:54:b4:3c:ec:0e:7e:6c:37:0e:02:46:c3:d2:01:2e:cc:ab:
70:6c:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:26:35 2026 by rpki-client